add session_hash column to users table
set a new session hash for a user when they sign up
require sessions to have a matching session_hash
add User#invalidate_sessions! which can be used to force logout a user
use current_session to log a user in here too
add test for Session
Merge pull request #17 from Sirupsen/add-session_hash

Add session_hash